Redirects from legitimate sites compromise the bulk of threats detected (unsurprisingly), but as you can see, just over a third of these are redirects specifically to Blackhole. Amongst the exploit sites seen, approximately half of them are Blackhole, confirming that this kit remains dominant in the market.